...
Critical - CVSS v3 score >= 9, to be fixed 2 weeks after discovery
High - CVSS v3 score >= 7, to be fixed 3 weeks after discovery
Medium - CVSS v3 score >= 4, to be fixed 5 weeks after discovery
Low - CVSS v3 score >= 4, to be fixed 2 weeks after discovery
Review
This policy will be kept up to date with requirements stated by Atlassian at all times.